Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: L4X2DKQRDnRvki2b9jg7Y+iqczNAUkZkPYsYVXJuHf0=
Subject key identifier: 2B:40:77:9F:06:03:A5:77:2A:40:75:1B:67:77:C9:75:90:CD:BF:E0
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 0197B5FBEA3A2550EAEEDFD1704B7223C968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0DE4
Signing time: Sat 28 Jun 2025 10:01:14 +0000
Manifest this update: Sat 28 Jun 2025 10:01:14 +0000
Manifest next update: Sun 29 Jun 2025 10:01:14 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: Hyx5Rici1ewmcAx5npGgSyG79ZYCBen24YFBqTgm7Go=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ea:3a:25:50:ea:ee:df:d1:70:4b:72:23:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Jun 28 10:01:14 2025 GMT
Not After : Jun 29 10:01:14 2025 GMT
Subject: CN=2b40779f0603a5772a40751b6777c97590cdbfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:a9:1e:69:5f:4f:83:a9:92:d5:90:84:52:
e7:f0:ef:6c:9e:64:47:04:7f:da:67:40:00:92:b5:
68:c2:72:79:a0:f7:06:c6:46:f3:83:de:18:66:fc:
4b:07:1c:d6:83:52:1a:f9:6f:a6:cf:1b:98:85:92:
3f:d8:9c:c4:6d:61:f4:21:17:eb:11:d0:39:0b:97:
9e:a3:1b:49:61:a5:f2:96:93:22:84:54:9d:1f:30:
56:23:ca:0c:bf:4c:34:fe:c3:37:07:00:2e:33:c2:
25:54:49:ff:9f:d6:7b:34:b6:78:1f:8e:9f:da:36:
d9:10:c3:57:c0:a7:d7:f7:96:e1:75:e3:e8:d4:dc:
70:57:77:75:3f:42:88:92:e6:93:27:aa:db:7d:ca:
bc:8e:ec:77:b0:37:39:9c:ce:c9:2f:cb:68:eb:fc:
34:40:57:9a:cc:8e:00:c3:eb:cf:a5:df:8d:dc:98:
5a:ed:8b:f4:e2:44:81:8e:6c:32:4e:ba:fe:c8:86:
0b:8b:1e:12:1e:9a:6e:21:39:d5:38:a0:40:46:eb:
7f:10:c1:de:ec:c6:38:2f:6b:ec:7f:75:92:45:82:
3d:e7:6d:a7:82:1c:03:0b:8d:40:3d:4f:b8:7f:63:
44:1f:e5:d5:3d:bc:88:cd:b4:a5:8d:fa:b4:ca:07:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:77:9F:06:03:A5:77:2A:40:75:1B:67:77:C9:75:90:CD:BF:E0
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:7e:ae:c4:66:1c:f7:0f:83:5f:01:81:c1:a5:17:ac:39:
32:c3:b8:44:0d:d8:a4:36:62:91:30:d1:1e:d7:05:bf:97:48:
25:fd:d3:9b:7b:18:bb:59:c1:d3:5e:9c:7e:38:36:08:33:59:
71:d1:d4:0c:26:cb:45:a0:64:2d:c8:84:b7:f1:2d:b9:11:39:
f6:f3:60:5d:aa:d1:e9:0a:b4:55:0b:e6:dd:92:7e:a8:5c:13:
10:01:79:d5:66:3e:03:0c:52:c7:f8:ab:4a:fb:59:65:5d:0c:
25:3b:ed:60:af:fe:d2:eb:d0:c9:7f:0b:28:8b:ff:e5:19:36:
6c:bc:a3:97:00:3b:94:b0:9a:b5:3c:b8:6e:b0:31:2c:d1:f1:
37:b9:87:d9:06:71:88:b5:1c:72:fd:b0:05:7e:16:4b:a2:63:
e1:93:47:87:09:b6:e1:64:b4:87:33:a1:43:cd:b0:2c:d1:44:
be:48:6c:73:d4:23:17:30:87:cd:cf:ef:8e:e4:6b:1d:2e:4c:
c5:3d:dc:18:f5:89:99:50:2e:50:d4:e2:3a:00:1c:8c:75:c6:
ca:eb:f6:a2:95:5e:e2:3b:6e:be:2f:f6:e0:8a:e6:2f:62:9e:
5c:67:0d:05:cb:00:5c:5c:79:36:d7:89:a7:50:86:0b:88:12:
a3:ff:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:02 2025 by rpki-client